UK GDPR: The UK General Data Protection Regulation - primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for data processing, individual rights, and organizational obligations
DPA 2018: Data Protection Act 2018 - the UK's implementation of data protection law, working alongside and supplementing the UK GDPR, providing specific provisions for data processing in the UK context
PECR: Privacy and Electronic Communications Regulations 2003 - specific rules for electronic communications, including requirements for electronic marketing, cookies, and communication services
ICO Guidance: Information Commissioner's Office guidance and codes of practice - authoritative interpretation and practical guidance on how to apply data protection legislation in the UK
EDPB Guidelines: European Data Protection Board guidelines - while not binding post-Brexit, these remain influential for UK data protection practice and interpretation
UK Case Law: Relevant judicial decisions from UK courts on data protection matters, establishing precedents and interpretations of data protection legislation
International Transfer Requirements: Post-Brexit requirements for transferring personal data outside the UK, including adequate safeguards and transfer mechanisms
Article 28 Requirements: Specific requirements under UK GDPR Article 28 detailing mandatory processor obligations that must be included in data processing agreements
Article 32 Security Requirements: Data security requirements under UK GDPR Article 32 specifying technical and organizational measures for ensuring appropriate security of personal data
Sub-processor Requirements: Rules and obligations regarding the appointment and oversight of sub-processors, including required contractual terms and prior authorizations
Breach Notification Obligations: Requirements for notifying data controllers and authorities of personal data breaches, including timing and content of notifications
Data Subject Rights: Obligations regarding handling and facilitating data subject rights requests, including access, rectification, erasure, and portability
E-Commerce Regulations: Electronic Commerce (EC Directive) Regulations 2002 - relevant for electronic contracts and online service providers
Contract Law Principles: Common law principles of contract law in England and Wales that affect the overall validity and enforcement of the agreement
